Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/d92fced4-e7f5-34d8-b098-532977890747.roa
File:                     d92fced4-e7f5-34d8-b098-532977890747.roa (raw, json)
Hash identifier:          NCyXjDBPPsrJuk6EjB6yNjIwWBBOnvQnwyh7xEv2TM8=
Subject key identifier:   A0:75:B4:CB:36:9B:A9:D3:5A:ED:0E:23:CF:36:AB:CF:C4:59:D6:D9
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F32557DCA950AAA12F3C1B480
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/d92fced4-e7f5-34d8-b098-532977890747.roa
Signing time:             Wed 16 Sep 2026 18:18:07 +0000
ROA not before:           Wed 16 Sep 2026 18:18:07 +0000
ROA not after:            Tue 15 Dec 2026 19:18:07 +0000
asID:                     22611
IP address blocks:        192.249.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:55:7d:ca:95:0a:aa:12:f3:c1:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 16 18:18:07 2026 GMT
            Not After : Dec 15 19:18:07 2026 GMT
        Subject: CN=ba251ef3-c060-4a0c-86ae-dc850254b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:76:b3:7a:78:83:43:e7:60:2b:29:0f:26:
                    24:73:ae:8e:ed:4b:b1:31:d8:6f:d9:f6:5e:c6:2f:
                    e6:f7:17:ca:84:fc:c5:1d:c1:49:c1:ef:8b:15:b5:
                    91:ce:ec:28:56:23:d1:7b:e4:9f:b5:4a:ba:0d:35:
                    f0:6e:3a:0a:ef:70:3e:c6:b0:20:bc:d8:39:fb:d5:
                    0a:3c:9a:34:bc:03:59:e6:b0:38:f7:76:ea:e3:44:
                    19:d0:d1:e5:97:39:0f:4f:64:64:52:ea:0f:98:0a:
                    b4:07:92:92:58:d6:54:8b:36:5d:20:04:5f:f2:a2:
                    d8:4a:ef:4f:ff:3e:56:d2:48:4e:a6:75:41:96:0e:
                    af:d2:43:7c:46:a6:c6:6d:ae:c9:a1:f4:4e:b9:71:
                    1b:ee:9d:41:3e:6c:79:f9:95:c5:65:0a:d7:8e:c2:
                    62:78:b8:64:a7:cf:d6:b6:9e:e4:bf:96:b6:76:08:
                    80:21:23:6c:1a:66:74:93:ab:87:f5:eb:b7:47:8c:
                    ac:8b:42:b0:76:ac:cc:b7:a9:44:92:60:d1:fe:4f:
                    68:0a:1f:1d:93:1b:35:86:3a:b8:3d:49:d9:45:b9:
                    e2:bc:7f:c4:6e:29:26:cb:b9:26:54:17:bf:29:5f:
                    f3:52:99:5f:52:f8:e7:b0:d9:1c:82:62:38:d8:48:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:75:B4:CB:36:9B:A9:D3:5A:ED:0E:23:CF:36:AB:CF:C4:59:D6:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/d92fced4-e7f5-34d8-b098-532977890747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.249.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:27:ec:24:db:cc:82:8b:fb:0c:81:e0:14:8d:ed:3a:c5:ab:
         99:b9:66:55:ae:a2:e5:ca:54:d9:88:a7:51:41:97:87:e9:44:
         f1:e4:31:7e:0d:fe:85:e2:0d:d7:18:5f:29:32:44:f2:ef:39:
         34:6b:ce:b4:68:aa:bd:9b:22:3f:e9:ad:6f:65:26:5f:43:56:
         db:f2:b3:4c:07:c3:c4:57:da:85:d6:be:06:f4:e1:c1:42:3b:
         45:7a:e4:c5:21:85:f2:e2:2d:e0:54:ed:d0:07:ea:3e:75:83:
         3f:46:1c:64:8e:95:2c:6b:5a:ce:35:cc:4a:a5:af:3e:3c:e7:
         d1:90:8a:e7:e0:1c:e9:94:46:72:dc:f1:fe:84:76:ad:13:64:
         c7:46:11:da:a5:7e:97:3c:d2:f7:b4:4d:73:39:74:25:5b:99:
         70:de:1a:c8:08:31:85:32:66:f0:e7:18:6e:71:64:ff:dc:78:
         f1:12:28:2b:af:00:60:4a:ad:e9:d6:10:f7:a6:45:30:b8:a2:
         25:f7:69:df:47:45:50:ac:7c:9a:9a:16:6e:e3:a5:85:ad:8e:
         1a:fc:e4:12:85:6e:a6:d1:90:c8:32:57:9d:b0:f9:91:7a:06:
         8e:74:d9:7e:eb:d9:84:b1:f0:0b:7a:f7:b4:52:37:47:87:40:
         dc:d4:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:07 2026 by rpki-client